Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/003f70-0a88-4fab-b374-af6be905799d/1/YsX8533eTi7k_WU1EAUpwvRE15o.mft
File: YsX8533eTi7k_WU1EAUpwvRE15o.mft (raw, json)
Hash identifier: 3m4YtDZ4xkfRsPXhx085F6SXIG8F1xlQm3iZcSwHeO8=
Subject key identifier: BE:0D:E6:47:0F:7F:50:15:C4:7F:E3:5E:E7:98:06:EF:48:C8:B9:A2
Authority key identifier: 62:C5:FC:E7:7D:DE:4E:2E:E4:FD:65:35:10:05:29:C2:F4:44:D7:9A
Certificate issuer: /CN=62c5fce77dde4e2ee4fd6535100529c2f444d79a
Certificate serial: 0196AD9F6E24BF67E523D39675E6926E0A7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YsX8533eTi7k_WU1EAUpwvRE15o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/003f70-0a88-4fab-b374-af6be905799d/1/YsX8533eTi7k_WU1EAUpwvRE15o.mft
Manifest number: 152B
Signing time: Thu 08 May 2025 02:00:28 +0000
Manifest this update: Thu 08 May 2025 02:00:28 +0000
Manifest next update: Fri 09 May 2025 02:00:28 +0000
Files and hashes: 1: HKNH5qVY82EVhwf41jFwu0WLXWQ.roa (hash: lq97v+q7hVfTasgsk/QjtVrEG9iM12Kuyq3A6kQDZ7s=)
2: YsX8533eTi7k_WU1EAUpwvRE15o.crl (hash: A/AHC5Z0hdjFMhYr+N+E3+KtTcct/2F6Ym7EeXbU1BQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/003f70-0a88-4fab-b374-af6be905799d/1/YsX8533eTi7k_WU1EAUpwvRE15o.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/003f70-0a88-4fab-b374-af6be905799d/1/YsX8533eTi7k_WU1EAUpwvRE15o.mft
rsync://rpki.ripe.net/repository/DEFAULT/YsX8533eTi7k_WU1EAUpwvRE15o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 20:38:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ad:9f:6e:24:bf:67:e5:23:d3:96:75:e6:92:6e:0a:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62c5fce77dde4e2ee4fd6535100529c2f444d79a
Validity
Not Before: May 8 02:00:28 2025 GMT
Not After : May 9 02:00:28 2025 GMT
Subject: CN=be0de6470f7f5015c47fe35ee79806ef48c8b9a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:00:29:4a:b3:7b:70:80:e7:98:f8:6d:8b:d7:
aa:70:ee:af:2e:53:4e:b5:8e:ca:5d:0d:cb:7a:bb:
87:23:5b:50:95:7c:0d:3b:40:43:f6:08:05:32:13:
c3:38:e6:b8:08:37:ad:8a:03:a5:1a:23:da:d6:25:
6e:56:c5:db:94:af:20:f0:b8:ea:92:56:8e:75:d2:
b3:51:58:22:97:62:f9:1c:b0:6a:de:5c:99:cf:e4:
13:59:66:eb:aa:b0:a9:4f:db:f2:e0:9c:db:5f:78:
96:c1:70:e0:af:cb:e7:69:4c:45:59:87:7c:95:8c:
40:4d:ac:4c:53:98:d9:61:08:2f:1f:1d:12:63:ff:
21:51:04:ab:0a:e2:cd:2f:14:16:a1:ad:4a:1f:fb:
fa:6c:8b:ee:a7:26:f9:e1:17:73:e7:07:fb:68:22:
40:5e:e0:56:33:f5:08:a1:89:c9:3e:97:2b:c1:19:
03:78:16:c1:7f:46:30:60:34:39:e7:25:e9:9d:3a:
35:15:4a:7f:6e:58:79:8b:19:87:8f:8a:b8:6b:0c:
3e:8f:41:0f:6d:f9:ca:66:84:e5:59:70:9b:1d:93:
6c:a9:f1:01:fa:61:b8:35:f2:59:cb:09:ca:0e:2e:
c8:82:6a:b4:be:01:44:f1:13:1e:42:4c:23:85:19:
02:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:0D:E6:47:0F:7F:50:15:C4:7F:E3:5E:E7:98:06:EF:48:C8:B9:A2
X509v3 Authority Key Identifier:
keyid:62:C5:FC:E7:7D:DE:4E:2E:E4:FD:65:35:10:05:29:C2:F4:44:D7:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YsX8533eTi7k_WU1EAUpwvRE15o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/003f70-0a88-4fab-b374-af6be905799d/1/YsX8533eTi7k_WU1EAUpwvRE15o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/003f70-0a88-4fab-b374-af6be905799d/1/YsX8533eTi7k_WU1EAUpwvRE15o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:9b:11:4e:dc:e2:11:b4:7e:d3:74:b3:a5:a7:b3:8e:58:9d:
f5:4c:dc:dd:f5:bc:76:d8:0d:a8:a6:10:49:d2:c8:04:03:04:
71:23:1f:cc:75:3c:6a:fb:62:a4:e1:ef:4a:6f:78:fd:08:1c:
98:fd:68:82:a2:0c:23:fe:fe:7f:4f:ce:b0:29:68:e1:2a:aa:
1b:27:ad:04:83:1e:bc:d1:e1:24:b0:20:6c:55:b9:5d:e9:62:
85:53:c3:af:a1:bc:64:cf:6a:d9:f4:88:8a:2c:d1:e7:bd:0e:
41:c5:e6:6a:70:cc:8d:63:c8:8c:79:59:63:7b:96:d4:21:4e:
c2:0d:81:06:99:44:b7:28:a2:03:c9:92:f3:f7:15:e5:76:06:
bf:2c:e5:f1:0c:b6:c7:b3:44:1b:72:6d:26:e6:65:3c:a5:32:
d6:2b:c4:a2:3e:41:d1:f2:41:81:a9:76:f0:f7:67:c1:b2:e2:
19:e7:8c:d2:44:4b:a3:31:f7:25:0a:48:c1:f0:e1:2c:33:d5:
af:b4:b7:63:73:c5:8f:da:43:9b:ee:22:9d:76:1e:49:db:e0:
3f:7e:e2:f8:d0:5d:9a:b5:70:d3:f0:32:ac:a9:ca:4e:bc:ac:
9d:26:8d:98:83:a2:33:7d:0a:44:2b:3f:6b:20:44:a4:88:88:
66:59:74:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZatn24kv2flI9OWdeaSbgp8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyYzVmY2U3N2RkZTRlMmVlNGZkNjUzNTEwMDUyOWMyZjQ0
NGQ3OWEwHhcNMjUwNTA4MDIwMDI4WhcNMjUwNTA5MDIwMDI4WjAzMTEwLwYDVQQD
EyhiZTBkZTY0NzBmN2Y1MDE1YzQ3ZmUzNWVlNzk4MDZlZjQ4YzhiOWEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtgApSrN7cIDnmPhti9eqcO6vLlNO
tY7KXQ3LeruHI1tQlXwNO0BD9ggFMhPDOOa4CDetigOlGiPa1iVuVsXblK8g8Ljq
klaOddKzUVgil2L5HLBq3lyZz+QTWWbrqrCpT9vy4JzbX3iWwXDgr8vnaUxFWYd8
lYxATaxMU5jZYQgvHx0SY/8hUQSrCuLNLxQWoa1KH/v6bIvupyb54Rdz5wf7aCJA
XuBWM/UIoYnJPpcrwRkDeBbBf0YwYDQ55yXpnTo1FUp/blh5ixmHj4q4aww+j0EP
bfnKZoTlWXCbHZNsqfEB+mG4NfJZywnKDi7Igmq0vgFE8RMeQkwjhRkCJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL4N5kcPf1AVxH/jXueYBu9IyLmiMB8GA1UdIwQY
MBaAFGLF/Od93k4u5P1lNRAFKcL0RNeaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXNYODUzM2VUaTdrX1dVMUVBVXB3dlJFMTVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC8wMDNmNzAtMGE4OC00ZmFiLWIzNzQt
YWY2YmU5MDU3OTlkLzEvWXNYODUzM2VUaTdrX1dVMUVBVXB3dlJFMTVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC8wMDNmNzAtMGE4OC00ZmFiLWIzNzQtYWY2YmU5MDU3OTlk
LzEvWXNYODUzM2VUaTdrX1dVMUVBVXB3dlJFMTVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk5sRTtzi
EbR+03Szpaezjlid9Uzc3fW8dtgNqKYQSdLIBAMEcSMfzHU8avtipOHvSm94/Qgc
mP1ogqIMI/7+f0/OsClo4SqqGyetBIMevNHhJLAgbFW5XelihVPDr6G8ZM9q2fSI
iizR570OQcXmanDMjWPIjHlZY3uW1CFOwg2BBplEtyiiA8mS8/cV5XYGvyzl8Qy2
x7NEG3JtJuZlPKUy1ivEoj5B0fJBgal28PdnwbLiGeeM0kRLozH3JQpIwfDhLDPV
r7S3Y3PFj9pDm+4inXYeSdvgP37i+NBdmrVw0/AyrKnKTrysnSaNmIOiM30KRCs/
ayBEpIiIZll0Ow==
-----END CERTIFICATE-----
Generated at Thu May 8 06:31:55 2025 by rpki-client